HARRIS BEACH 

Attorneys at Law 

September 13, 2018 99 garnsey road 

PlTTSFORD, NY 145 34 
(585)419-8800 

Dawn M. Russell 

Director of Compliance and Risk 

Management 

DIRECT: (585) 419-8708 

Fax: (585) 419-8801 

drussell@HarrisBeach.com 


Re: Data breach at Harris Beach where your name and Social Security Number could 

have possibly been accessed. 

Dear : 

On July 9, 2018, an unauthorized individual accessed the emails of one of our attorneys. As 
soon as the breach was discovered, we reviewed the contents of those emails to learn what 
information, if any, could have been exposed, and then hired a computer forensics expert to 
investigate the crime and verify our conclusions. The expert believes that the hacker was 
attempting to use the email account to deceive other individuals into divulging their passwords - 
and not in an effort to access the information in the emails. Unfortunately, however, the expert 
advises that the method used to access the email account automatically downloads the entire 
contents of the mail box to the hacker’s personal computer, which makes it possible that the 
hacker still possesses the contents of this mail box and could make use of it in the future. 

Regretfully, in the course of analyzing the mail box, we have learned that one of the emails 
contained your Social Security Number and name. Since we cannot rule out the possibility that 
the hackers may actually look at the emails downloaded, we are informing you of this event so 
that you can monitor your accounts and other personal information for suspicious activities. 
Because this involves your Social Security Number, you should be aware that the typical types of 
crime committed with this information are the filing of fraudulent tax returns claiming a refund 
and fraudulently applying for credit in your name. 

We understand that it can be frustrating and time-consuming to address these issues. However, 
due to this incident, we are offering identity theft protection services through ID Experts® to 
provide you with MyIDCare™. With this protection, MyIDCare will help you resolve issues if 
your identity is compromised. We strongly encourage you to register for this free identity theft 
protection service. To enroll please visit https://app.myidcare.com/account-creation/protect or 
call 1-800-939-4170 using your enrollment code, . Enclosed is an information 

sheet ID Experts prepared generally outlining credit monitoring and fraud protection. 

Your 36 month MyIDCare membership will include the following: 

Complete Credit Monitoring and Recovery Services 

• Tri-Bureau Credit Monitoring - Monitors any changes reported by Experian, Equifax 
and TransUnion Credit Bureaus to your credit report. 
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• CyberScan Monitoring - Monitors criminal websites, chat rooms, and bulletin boards 
for illegal selling or trading of your personal information. 

• Full Managed ID Theft Restoration Services - Should you believe that you are a victim 
of identity theft, MyIDCare will work with you to assess, stop, and reverse identity theft 
issues. 

• Identity Theft Insurance - In the event of a confirmed identity theft, you may be eligible 
for reimbursement of up to $1,000,000 for expenses related to that theft. 

Again, we regret that this crime against our firm has involved your information as well. If you 
have any questions or concerns, please don’t hesitate to contact me at the phone number or email 
address above. 


Sincerely, 


DR 

Enclosure 


Dawn M. Russell 

Director of Compliance and Risk 

Management 



Schnitzer, Steven 


From: 

Sent: 

To: 

Subject: 

Attachments: 


Breach Security 

Thursday, September 13, 2018 3:50 PM 
Breach Security 

NYS Security Breach Notification submission/NYAG Confirmation # SB46255 
ATT00001.bin; Notice to Affected NYS Residents Template.pdf; Identity Theft Protection 
Enclosure.pdf 


OFFICE OF THE ACTING ATTORNEY GENERAL BARBARA UNDERWOOD 
STATE OF NEW YORK DEPARTMENT OF I AW 



Bureau of Internet and Technology 
28 Liberty Street 
New York, NY 10005 

Phone: (212)416-8433 | Fax: (212)416-8369 


Consumer Hotline 
(8oo)77i-7755 
TDD (800) 788-9898 
http://www.ag.11y.gov 


Submitted on: 09 / 13/2018 03:49 PM 
Complaint ID: SB 46255 


Entity Information 


Name: 

Street Address: 
City/Town: 

State: 

Zip: 

Organization Type: 
Organization Size: 
URL: 


Harris Beach PLLC 

99 Gamsey Road 

Pittsford 

NY 

14534 

Other Commercial 
101 to 500 

https://www.harrisbeach.com/ 


Breach Details 


Description of Breach: 

Type of attack: 

Other Description: 

Information acquired in combination with name or other personal 
identifier: 

Total persons affected (Including NYS residents): 


External systems breach 

Password/Credentials 

Compromised 


Social security number 
74 


1 





New York State residents affected: 


69 


Do you believe that this security breach w as part of a larger breach that 
likely affected other organizations? 

Comments: 

If the number of NYS residents exceeds 5,000, have the consumer 
reporting agencies been notified? 

Breach Occurred From: 

Breach Occurred To: 

Breach Discovered: 


No 


No 

07/09/2018 

07/12/2018 

07/12/2018 


Other Information 


Consumer notification date: 09/13/2018 


Manner of notification to affected 
persons: 

List dates of any previous (within 12 
months) breach notifications: 

Identity theft protection service 
offered: 


Written 


Yes 


Provider: 

Duration: 

Brief description of service: 


IDExperts 
3 years 

?Tri-Bureau Credit Monitoring ?CyberScan Monitoring ?Full 
Managed ID Theft Restoration Services ?Identity Theft Insurance 


Submitted By 

Name: 

Title: 

Firm name: 

Telephone: 

Email: 

Relationship to entity whose information was 
compromised: 

Additional comments: 


Dawn M. Russell 

Director of Compliance and Risk 
Management 

Harris Beach PLLC 

585-419-8708 

drussell@harrisbeach.com 

Employee 


2 



